added comment about mysql needing the escaping